[14:18:52] <manveru> heya, i'm wondering if there's some way to resolve the actual names for pypi downloads of packages in a Pipfile.lock
[14:19:39] <manveru> for example i have a file that uses the name `werkzeug` while the download location uses `Werkzeug`... i'm not sure how to detect this
[14:21:54] <manveru> also is there some way to figure out which entry in the hashes array corresponds to the source download beforehand? Or is the order truly random?
[14:31:34] <techalchemy> the names should be normalized manveru, i.e. lowercased/replaces _ and . with -
[14:32:00] <techalchemy> and hashes, i think were not deterministic before, but should be going forward
[14:34:47] <manveru> my goal is to extract the correct hash index and download url for each dependency for easier packaging using Nix... some way to build a dependency graph would be awesome too, but not really essential
[14:36:01] <techalchemy> 'pipenv graph --json' might be what you want
[14:36:17] <manveru> so atm i have a list of manual fixes for package names, like `sqlalchemy => SQLAlchemy` or `py-ecc => `py_ecc`
[14:36:32] <techalchemy> i'm not sure what the capitalization gets you
[14:36:53] <manveru> if they're not captialized correctly, the download url will be a 404
[14:39:06] <techalchemy> sure, but pipenv doesn't provide the url itself, only a name -- you still need to query the index for a proper url
[14:40:02] <manveru> is there some place where this API is documented? searched on https://pypi.org/ but couldn't find anything...